General
- Target 2026-08-13_d6cfeae23a70ec3f85baf678c12920e3_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260813-ynwmfaep9s
- SHA256 babbaa14293f63ba3efef681815b98d3ce70ebbf666b6ba19e4b964291e5a244
- MD5 d6cfeae23a70ec3f85baf678c12920e3
- SHA1 1f8b7ee8bbaeb14456c940c41cdb286eeec0d975
- SHA512 e7c1b5c165c058590288a7ba9e94dedfe792afda399d1342f113606a14949f7dd0ceed541fcf064d5b48c4c6b322a69fd3c2b2e54d07e0c2d00caea1053616d6
- SSDEEP 98304:o1+2cA83vOlqJtE/ZTyTuSSk7JbVop3PfD/P+R:jv82ZJJopHzPg
- TLSH T17246BF01F78585F1F59201B0697ABB7A983DAE29573085C7A3E01D2A89302D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-13_d6cfeae23a70ec3f85baf678c12920e3_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_d6cfeae23a70ec3f85baf678c12920e3_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_d6cfeae23a70ec3f85baf678c12920e3_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 babbaa14293f63ba3efef681815b98d3ce70ebbf666b6ba19e4b964291e5a244
- MD5 d6cfeae23a70ec3f85baf678c12920e3
- SHA1 1f8b7ee8bbaeb14456c940c41cdb286eeec0d975
- SHA512 e7c1b5c165c058590288a7ba9e94dedfe792afda399d1342f113606a14949f7dd0ceed541fcf064d5b48c4c6b322a69fd3c2b2e54d07e0c2d00caea1053616d6
- SSDEEP 98304:o1+2cA83vOlqJtE/ZTyTuSSk7JbVop3PfD/P+R:jv82ZJJopHzPg
- TLSH T17246BF01F78585F1F59201B0697ABB7A983DAE29573085C7A3E01D2A89302D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.